OCTO B E R 2 0 2 5 VOLUME 4 • I SSUE 2 3 SEPARATING INFRASTRUCTURE AND CYBERSECURITY 4 ARE YOU PROTECTED FROM EMPLOYEE-FOCUSED ATTACKS? 6 B USINESS PROTECTION SECURITY MAKES SENSE IN THE CLOUD ERA 7 STRENGTHEN DATA SECURITY WITH AUDIT LOGS AND MORE INSIDE CONTENTS OXEN NETWORKED SECURITY IS OUR MIDDLE NAME
2 O C TO B E R 2 0 2 5 This issue can be summed up in one word: security. We cover cybersecurity, security breaches, security awareness training, email security, cloud security, smart identity security, and more. Security has become the heart of what we do at OXEN Technology. We begin on page 3, where President Heather Lantz explains Why Separating Infrastructure and Cybersecurity Teams Matters. It's OXEN Technology's current strategy to enhance overall performance and security posture. Are You Protected from Employee-Focused Attacks? You can explore this question on pages 4 and 5, which discusses security threats including phishing, smishing, vishing, business email compromise, and social engineering. This is followed on page 6 with a look at why Business Protection Security Makes Sense in the Cloud Era and how Microsoft 365 secures modern organizations. You won’t want to miss this article, written by OXEN Technology’s Ryan Pieken, vCIO/vCISO Services. On page 7, we urge you to Strengthen Data Security with Audit Logs and Technical Controls. These proactive measures create an environment where potential incidents are quickly detected and contained. Security threats can easily keep you up at night — unless you partner with OXEN Technology to implement the solutions required to protect your organization. Please contact us to discuss how best to enhance your security. Sincerely, Kelle White Vice President, Sales OXEN Technology WESTERN IOWA – Harlan Corporate Headquarters CENTRAL IOWA – Ames EASTERN NEBRASKA – Omaha CENTRAL KANSAS - Wichita SOUTHWEST MISSOURI - Joplin Contact OXEN at hello@oxen.tech Northern Region – Cori McKissick cmckissick@oxen.tech Southern Region – Kelle White kwhite@oxen.tech OXEN NETWORKED is a publication of OXEN Technology. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form, electronic, photocopying, recording, mechanical, or otherwise without the prior written permission of OXEN Technology. All rights are reserved. EDITORIAL AND CIRCULATION CONTACT: Kelle White, VP of Sales & Marketing 316.500.2362, kwhite@oxen.tech TRADEMARKS: All brand names and product names used in this publication are trade names, service marks, trademarks, or registered trademarks of their respective owners. ADDITIONAL ISSUES: Extra issues are available to business customers on a limited basis while supplies last. Contact Kelle White at 316.500.2362. POSTMASTER SEND CHANGES TO: Kelle White, VP of Sales & Marketing OXEN Technology Wichita, KS 67209 kwhite@oxen.tech Copyright © 2025 by OXEN Technology and Cornerstone Publishing Group, Inc. OXEN NETWORKED PRINTED ON RECYCLED PAPER
O C TO B E R 2 0 2 5 3 OXEN NETWORKED By Heather Lantz, President SEPARATING INFRASTRUCTURE AND CYBERSECURITY MANAGED SERVICES OXEN Technology plays a pivotal role in ensuring our clients’ infrastructures operate smoothly and securely. One key strategy we are now employing is to separate infrastructure managed services from cybersecurity managed services for the reasons outlined below. SPECIALIZED EXPERTISE Infrastructure managed services focus on maintaining and optimizing the physical and virtual components of IT systems, such as servers, networks, and storage solutions. Cybersecurity managed services, on the other hand, are dedicated to protecting these systems from cyber threats, including malware, phishing attacks, and data breaches. By separating these services, OXEN Technology can ensure that each team develops specialized expertise in their respective areas, leading to more effective and efficient service delivery. ENHANCED SECURITY POSTURE Infrastructure teams should be primarily concerned with system performance and uptime, while cybersecurity teams specialize in threat detection, risk assessment, and incident response. Separating these functions allows cybersecurity teams to concentrate solely on protecting the organization's assets, thereby enhancing the overall security posture. IMPROVED COMPLIANCE AND RISK MANAGEMENT Regulatory compliance is a significant concern for many businesses. Data protection regulations, such as HIPAA, are beginning to require dedicated resources and expertise to ensure compliance. By separating infrastructure and cybersecurity services, OXEN Technology can allocate specialized teams to handle compliance requirements more effectively, reducing the risk of non-compliance and associated penalties. EFFICIENT RESOURCE ALLOCATION Separating these services allows OXEN Technology to allocate resources more efficiently. Infrastructure teams can focus on maintaining and upgrading IT systems, while cybersecurity teams can dedicate their efforts to monitoring and responding to security threats. SYNERGISTIC COLLABORATION While infrastructure and cybersecurity teams have distinct roles, their functions are interlinked and complementary. Infrastructure teams provide the backbone that supports the organization's technological needs, while cybersecurity teams ensure these systems are protected from threats. By maintaining separate but collaborative teams, OXEN Technology can foster a synergistic relationship that enhances overall service quality and security.
4 O C TO B E R 2 0 2 5 In 2025, phishing attacks continue to be a major threat to businesses, with significant financial and operational impacts. Small and medium-sized businesses (SMBs) are particularly vulnerable to these attacks. Phishing is a type of cybercrime where an attacker essentially poses as a legitimate entity. They send emails or forms to unsuspecting employees, hoping to lure these targets into providing confidential information. PHISHING IS RAMPANT Phishing emails remain the most common entry point for attacks. Over 90% of data breaches include an email-based tactic. These emails are carefully designed to trick employees into clicking links, downloading files, or sharing sensitive information. Unfortunately, all it takes is one click or one reply for your organization to be compromised. What does a phishing email look like? There are many variations, but here’s one example: An employee receives an email with an attached invoice for “consultant work” from Company B along with a W9 form for an “employee” of Company B. These attachments are to try and legitimize the phishing attempt. Further research on an attempt like this could reveal that Company B is a legitimate company but was spoofed for the purpose of this attack, and the email was fraudulent. OTHER EMPLOYEE-FOCUSED ATTACKS While phishing is widespread, employees are also targeted through other attack methods: • Smishing – Scammers use SMS (text) messages to trick individuals into revealing sensitive information or performing actions that can compromise their security. Smishing leverages the higher level of trust people often place in text messages compared to emails. • Vishing – Short for "voice phishing," vishing is a cybersecurity attack where scammers use phone calls to trick individuals into revealing sensitive information. They Phishing is only one of the many tactics cybercriminals use ARE YOU PROTECTED FROM EMPLOYEE-FOCUSED ATTACKS?
O C TO B E R 2 0 2 5 5 OXEN NETWORKED often impersonate trusted entities like banks, government agencies, or technical support. • Business Email Compromise (BEC) – In this sophisticated cybercrime, attackers impersonate executives or vendors to trick employees into transferring funds, sharing sensitive data, or purchasing gift cards. • Social Engineering – Manipulation is used to gain the trust of targets. The goal is to have them lower their guard and give up sensitive information. EMPLOYEE TRAINING IS ESSENTIAL To protect your business, your employees must know how to identify a phishing scam and be equipped with the skills to handle an attack. If your employees are uninformed and careless about clicking links, you might as well hand your data to attackers. OXEN Technology offers security awareness training, which includes annual training, weekly micro training, and current simulated email phishing campaigns to help keep your employees vigilant. We manage everything, so there’s no work for you. TRAINING ALONE, HOWEVER, ISN’T ENOUGH While security awareness training is essential, it cannot be the only line of defense. Cybercriminals keep evolving their tactics, and employees may still make mistakes. To most effectively reduce your risk, training must be paired with strong technology safeguards that stop threats before they ever reach employees. OXEN Technology offers a comprehensive three-prong approach that includes: • Advanced email security and filtering to block phishing attempts at the source • Ongoing cybersecurity services including monitoring and incident response • Employee training and awareness programs to strengthen human defenses This combination most effectively protects both the people and the technology within your organization. CONTACT OXEN TECHNOLOGY NOW Cybercriminals don’t stop at email. If you’re relying only on security awareness training, your employees and your business remain exposed. Let’s talk about how we can combine training with powerful email security and cybersecurity protection to give your organization the safety net it needs and deserves. For more details about our comprehensive approach to cybersecurity, please contact OXEN Technology at hello@oxen.tech or 888.296.3619, option 3. • 65% of breaches are of the category Phishing and Ransomware • Median Cost ~ 50K up from 26k in 2023 • Ransomware demands up to 24% of total revenue • Internal user mistakes largest increase BREACHES IMPACT YOUR BUSINESS
6 O C TO B E R 2 0 2 5 The shift to the cloud has transformed how organizations operate, making strong business protection more essential than ever. With so much company data now living in the cloud, security strategies must evolve beyond traditional on-premises models. CYBERSECURITY: FROM EMAIL AND ENDPOINTS TO CLOUD SECURITY Historically, companies have relied on firewalls, email protection, and endpoint detection and response (EDR) software — often from various third-party vendors — to defend against threats. However, this approach can create complexity, higher costs, and gaps in overall protection. THE UNIFIED POWER OF MICROSOFT 365 Microsoft 365 answers these challenges with an integrated suite of security services. Rather than juggling multiple tools, organizations can use M365 to protect email, endpoints, identities, and data in one seamless environment. With M365, security isn’t just layered. It’s interconnected and proactive. PROACTIVE THREAT PROTECTION Traditional EDR solutions often act only after a malicious file begins executing. Microsoft goes further by blocking threats before they can even be downloaded or opened, thanks to intelligent defenses that intercept malicious files, websites, and domains. This reduces the window of risk and stops attacks before they start. SMART IDENTITY SECURITY In the cloud world, protecting user identities is critical. M365 uses advanced AI to monitor for suspicious sign-in patterns, such as logins from vastly different locations in a short period. If something seems off, access can be blocked or require further verification, dramatically lowering the chances of compromised accounts. DATA AND VULNERABILITY MANAGEMENT With more data in M365 tools like SharePoint and OneDrive, robust internal controls are essential. M365 provides ongoing visibility and granular access settings, so only the right people can reach sensitive information. Built-in vulnerability management and policy guidance help organizations find and fix weak points, keeping defenses up to date as threats evolve. CONSOLIDATING AND STRENGTHENING SECURITY Consolidating security under M365 brings a cohesive approach to protecting your organization. That being said, setting up and managing such a robust platform is not so simple. That is where OXEN comes in. M365 Security is a core focus for us, and while it takes a lot of expertise behind the scenes to keep all of it working, the goal is to make it simple for our clients! CONCLUSION M365’s unified security platform with OXEN expertise empowers organizations to stay ahead of threats and protect what matters most without relying on a patchwork of thirdparty solutions. Visit oxen.tech/contact to receive additional information or schedule a discussion. By Ryan Pieken, vCIO/vCISO Services How Microsoft 365 secures modern organizations BUSINESS PROTECTION SECURITYMAKES SENSE IN THE CLOUD ERA
O C TO B E R 2 0 2 5 7 OXEN NETWORKED STRENGTHEN DATA SECURITYWITH AUDIT LOGS AND TECHNICAL CONTROLS THE POWER OF AUDIT LOGS Audit logs are the backbone of effective security monitoring and incident response. By systematically capturing and recording user and system activities, they create a transparent trail of what happens within your network. These records enable you to: • Detect and investigate anomalies. Swiftly identify suspicious behavior, whether it’s unauthorized access, unusual data transfers, or attempted privilege escalation. • Support accountability. Ensure all critical actions are traceable, discouraging misuse and making it easier to pinpoint the origin of any breach. • Meet regulatory requirements. Compliance frameworks often mandate comprehensive logging and the ability to reconstruct events after a security incident. Maintaining and regularly reviewing audit logs is a critical practice that supports your entire security posture. TECHNICAL CONTROLS FOR INTERNAL SECURITY A layered set of technical safeguards help organizations manage risk. Consider these foundational practices: • When staff members change roles or leave the company, access rights should be immediately and thoroughly revoked. Automated workflows can ensure no lingering permissions remain, minimizing the risk of unauthorized activity. • Regular, reliable backups protect your mission-critical data —not just from malicious acts, but also from accidental loss. Test restore procedures frequently to ensure data can be recovered when needed. • With so many personal devices in workplaces, enforcing mobile device management (MDM) and clear policies is key. Technical controls such as remote wipe, enforced encryption, and application whitelisting provide a safety net, even when devices are lost or compromised. • Keeping systems updated is one of the simplest yet most effective ways to block threats. Employ centralized patch management and real-time antivirus solutions to address vulnerabilities before they can be exploited. • Even the most advanced controls depend on informed users. Implement regular security awareness training and reinforce it with technical safeguards that prevent risky behaviors, such as restricting the installation of unauthorized software. Ultimately, the goal is not to scrutinize individuals, but to build resilient systems where audit logs and technical controls work together to protect people and data. By emphasizing proactive measures, organizations create an environment where potential incidents are quickly detected, contained, and used for learning. Data breaches bring to mind shadowy faraway hackers. While outside threats remain significant, many security incidents originate from within an organization—sometimes inadvertently. Instead of focusing on blame, it’s essential to recognize that even well-intentioned individuals can make mistakes or be exploited, and proactive technical controls are fundamental in preventing breaches and mitigating their impact.
Strong on experience. Strong on knowledge. Strong on skills. If you want strong IT services, put our team to work for you. To schedule a free consultation, visit www.oxen.tech/contact or call 888.296.3619. STRONG AS AN OX
RkJQdWJsaXNoZXIy MTMzNDE=